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1 . K This communication is responsive to 06/23/2005 . 

2. The allowed claim(s) is/are 1-7. 10-19.22-26.28.30.32.33.35.37.39 and 40 . 

3. O The drawings filed on are accepted by the Examiner. 

4. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
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1 • □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 1 7.2(a)). 
* Certified copies not received: . 
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6. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 
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Paper No./Mail Date . 
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DETAILED ACTION 

EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1.312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone with 
Patrick J.S. Inouye on June 21 , 2005 and on June 27, 2005. 

The application has been amended as follows: 

In The Claims 

Claim 1 : (currently amended): A system for dynamically identifying internal hosts in 
a heterogeneous computing environment with multiple sub-networks, comprising: 

An analysis module analyzing a plurality of packets, each such packet 
comprising a source address of an originating host and a destination address of a 
receiving host; and 

A classification module classifying an unknown originating host located at the 
source address of an outbound packet as an inside host with high confidence, 
classifying an unknown receiving host located at the destination address of an inbound 
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packet as an inside host, [[and]] reclassifying the unknown receiving host as an inside 
host with high confidence upon receiving a further outbound packet having a source 
address corresponding to the address of the unknown receiving host, managing packet 
traffic flow by monitoring the packets and adjusting control flow thereof, and ignoring 
packet traffic flow for each packet with an originating host or a receiving host classified 
as an inside host with high confidence . 
Claim 8: (canceled) 
Claim 9: (canceled) 

Claim 13: (currently amended): A method for dynamically identifying internal hosts in 
a heterogeneous computing environment with multiple sub-networks, comprising: 

Analyzing a plurality of packets, each such packet comprising a source address 
of an originating host and a destination address of a receiving host; 

Classifying an unknown originating host located at the source address of an 
outbound packet as an inside host with high confidence; 

Classifying an unknown receiving host located at the destination address of an 
inbound packet as an inside host; [[and]] 

Reclassifying the unknown receiving host as an inside host with high confidence 
upon receiving a further outbound packet having a source address corresponding to the 
address of the unknown receiving host; 

Managing packet traffic flow by monitoring the packets and adjusting control flow 
thereof: and 
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Ignoring packet traffic flow for each packet with an originating host or a receiving 
host classified as an inside host with high confidence . 
Claim 20: (canceled) 
Claim 21: (canceled) 

Claim 25: (currently amended): A computer-readable storage medium holding code 
for performing the method according to Claims 13, 14, 15, 16, 17, 18, 19, 20 and 21 or 
19. 

Claim 26: (currently amended): A system for classifying hosts in a heterogeneous 
computing environment, comprising: 

A table storing records comprising a plurality of states which each specify a 
location of a host relative to a network domain boundary, the states comprising: 

An Unknown state describing an undefined host; 

An Outside state describing a host located outside the network domain boundary; 
An Inside state describing a host provisionally located inside the network domain 
boundary; and 

An Inside with High Confidence state describing a host located inside the 
network domain boundary; 

A traffic manager classifying the hosts based on source address with each 
outbound packet originating from an Unknown state, Outside state or Inside state into 
an Inside with High Confidence state and state , classifying the hosts based on 
destination address with each inbound packet originating from an Unknown state or 
Outside state into an Inside with High Confidence state, classifying the hosts based on 
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source address with each inbound packet originating from an Unknown state into an 
Outside state, classifying the hosts based on destination address with each outbound 
packet originating from an Unknown state into an Outside state, and ignoring packet 
traffic based on source address or destination address with each outbound packet and 
each inbound packet originating from an Inside with High Confidence state . 
Claim 27: (canceled) 
Claim 29: (canceled) 
Claim 31: (canceled) 

Claim 33: (currently amended): A method for classifying hosts in a heterogeneous 
computing environment, comprising: 

Defining a plurality of states which each specify a location of a host relative to a 
network domain boundary, the states comprising: 

An Unknown state describing an undefined host; 

An Outside state describing a host located outside the network domain boundary; 
An Inside state describing a host provisionally located inside the network domain 
boundary; and 

An Inside with High Confidence state describing a host located inside the 
network domain boundary; 

Classifying the hosts based on source address with each outbound packet 
originating from an Unknown state, Outside state or Inside state into an Inside with High 
Confidence state; [[and]] 
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Classifying the hosts based on destination address with each inbound packet 
originating from an Unknown state or Outside state into an Inside with High Confidence 
state; 

Classifying the hosts based on source address with each inbound packet 
originating from an Unknown state into an Outside state: 

Classifying the hosts based on destination address with each outbound packet 
originating from an Unknown state into an Outside state: and 

Ignoring packet traffic based on source address or destination address with each 
outbound packet and each inbound packet originating from an Inside with High 
Confidence state . 
Claim 34: (canceled) 
Claim 36: (canceled) 
Claim 38: (canceled) 

Claim 40: (currently amended): A computer-readable storage medium holding code 
for performing the method according to Claims 33, [[34^]] 35, [[36]] or 37. 

Allowable Subject Matter 

2. Claims 1-7, 10-19, 22-26, 28, 30, 32-33, 35, 37, 39-40 are allowed. 

3. The following is an examiner's statement of reasons for allowance: 

The prior art does not disclose or fairly suggest wherein an apparatus or a 
method having the following features of the invention: 



Application/Control Number: 09/884,884 
Art Unit: 2667 



Page 7 



A classification module classifying an unknown receiving host located at the 
destination address of an inbound packet as an inside host, and reclassifying the 
unknown receiving host as an inside host with high confidence upon receiving a further 
outbound packet having a source address corresponding to the address of the unknown 
receiving host as indicated in independent claims 1 . 13, 25 & 40 . 

A traffic manager ignoring packet traffic based on source address or destination 
address with each outbound packet and each inbound packet originating from an inside 
with high confidence state as indicated in independent claims 1,13. 25. 26. 33 & 40 . 

It is noted that the closest prior art, McNamara (U.S. 6,262,976), shows 
classification of packets into different classes. However, McNamara fails to disclose 
the underlined limitations as described above. 

Any comments considered necessary by applicant must be submitted no later < 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Viet Q. Le whose telephone number is 571-272-2246. 
The examiner can normally be reached on 8 AM -5 PM. 
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1 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Chi Pham can be reached on 571-272-3179. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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